fix(cli): read version from package.json instead of hardcoding

[sharadvc]

What & why

Closes #5. The CLI version was hardcoded as 0.1.0 in src/cli.ts and drifted from the actual package.json version (0.1.1). --version now always reports the real package version.

Changes

• src/cli.ts: replace const VERSION = "0.1.0" with createRequire(import.meta.url) reading ../package.json.version, with a "0.0.0" fallback on read failure. Path works from both src/cli.ts and dist/cli.js.
• test/cli.test.ts: regression test asserting --version prints the exact package.json version (fails on the old hardcode).

Checklist

• Focused change with a clear description
• Ran format / lint / tests — 70 tests pass (7 files), npm run typecheck clean
• No docs/CHANGELOG change needed (behavior now matches the real version)
• Linked issue: Closes CLI version is hardcoded in src/cli.ts and has drifted from package.json #5

Notes

Built and verified: node dist/cli.js --version → 0.1.1. Authored with AI assistance (Claude/Codex-class model); reviewed and verified locally before opening.

[github-actions]

Merged. Thanks a lot, @sharadvc.

Good, focused change. Exactly the kind of thing MCP-audit needs.

If MCP-audit is useful to you, a star goes a long way.

Happy to see more from you whenever you have the time.